<?php
class JSSDK {
  private $appId;
  private $appSecret;

  public function __construct($appId, $appSecret) {
    $this->appId = $appId;
    $this->appSecret = $appSecret;
  }

  public function getSignPackage($url = '') {
    $jsapiTicket = $this->getJsApiTicket();

    if (!$url) {
        // 注意 URL 一定要动态获取，不能 hardcode.
        $protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
        $url = "$protocol$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";
    }

    $timestamp = time();
    $nonceStr = $this->createNonceStr();

    // 这里参数的顺序要按照 key 值 ASCII 码升序排序
    $string = "jsapi_ticket=$jsapiTicket&noncestr=$nonceStr&timestamp=$timestamp&url=$url";

    $signature = sha1($string);

    $signPackage = array(
      "appId"     => $this->appId,
      "nonceStr"  => $nonceStr,
      "timestamp" => $timestamp,
      "url"       => $url,
      "signature" => $signature,
      "rawString" => $string
    );
    return $signPackage; 
  }

  private function createNonceStr($length = 16) {
    $chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
    $str = "";
    for ($i = 0; $i < $length; $i++) {
      $str .= substr($chars, mt_rand(0, strlen($chars) - 1), 1);
    }
    return $str;
  }
  
  private function getJsApiTicket() {
    // jsapi_ticket 应该全局存储与更新，以下代码以写入到文件中做示例
    $data = json_decode($this->get_php_file(__DIR__ . "/jsapi_ticket.php"));
    if (!$data || $data->expire_time < time()) {
      $accessToken = $this->getAccessToken();
      // 如果是企业号用以下 URL 获取 ticket
      // $url = "https://qyapi.weixin.qq.com/cgi-bin/get_jsapi_ticket?access_token=$accessToken";
      $url = "https://api.weixin.qq.com/cgi-bin/ticket/getticket?type=jsapi&access_token=$accessToken";
      $res = json_decode($this->httpGet($url));
      $ticket = $res && isset($res->ticket) ? $res->ticket : null;
      if ($ticket) {
        $data->expire_time = time() + 7000;
        $data->jsapi_ticket = $ticket;
        $this->set_php_file(__DIR__ . "/jsapi_ticket.php", json_encode($data));
      }
    } else {
      $ticket = $data->jsapi_ticket;
    }

    return $ticket;
  }

  private function getAccessToken() {
    // access_token 应该全局存储与更新，以下代码以写入到文件中做示例
    $data = json_decode($this->get_php_file(__DIR__ . "/access_token.php"));
    if (!$data || $data->expire_time < time()) {
      // 如果是企业号用以下URL获取access_token
      // $url = "https://qyapi.weixin.qq.com/cgi-bin/gettoken?corpid=$this->appId&corpsecret=$this->appSecret";
      #普通公众号获取授权令牌access_token
      /*$url = "https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appid=$this->appId&secret=$this->appSecret";
      $res = json_decode($this->httpGet($url));
      $access_token = $res && isset($res->access_token) ? $res->access_token : null;*/
      #微信开放第三方平台获取授权令牌
    	$ComponentVerifyTicket =  file_get_contents("/data/wwwroot/redpack/wx/ticket.log");
    	$authorizer_refresh_token = file_get_contents("/data/wwwroot/redpack/wx/authorizer_refresh_token.log");
    	$component_appid =  file_get_contents("/data/wwwroot/redpack/wx/component_appid.log");
    	$component_appsecret = file_get_contents("/data/wwwroot/redpack/wx/component_appsecret.log");
    	$vendor_mp = array(
    			"appid"=>$this->appId,
    			"com_appid"=>$component_appid,
    			"component_appsecret"=>$component_appsecret,
    			"ComponentVerifyTicket"=>$ComponentVerifyTicket,
    			"authorizer_refresh_token"=>$authorizer_refresh_token,
    	);    	
    	$com_access_token = $this->get_component_access_token ( $vendor_mp ['appid'], $vendor_mp ['com_appid'], $vendor_mp ['component_appsecret'], $vendor_mp ['ComponentVerifyTicket'] );    
    	$url3 = 'https://api.weixin.qq.com/cgi-bin/component/api_authorizer_token?component_access_token=' . $com_access_token;
    	$data3 = '{"component_appid":"' . $vendor_mp ['com_appid'] . '","authorizer_appid":"' . $vendor_mp ['appid'] . '","authorizer_refresh_token":"' . $vendor_mp ['authorizer_refresh_token'] . '"}';
    	$res3 = $this->curl_post ( $data3, $url3);
    	$res3= json_decode ( $res3);    	
    	$access_token = $res3->authorizer_access_token;
    	#====End===
      if ($access_token) {
        $data->expire_time = time() + 7000;
        $data->access_token = $access_token;
        $this->set_php_file(__DIR__ . "/access_token.php", json_encode($data));
      }
    } else {
      $access_token = $data->access_token;
    }
    return $access_token;
  }
  
  public function get_component_access_token($appid, $com_appid, $com_appsecret, $component_verify_ticket) {
  	//$component_access_token = “from cache”;
  	$component_access_token = null;
  	if (! $component_access_token) {
  		$data = '{"component_appid":"' . $com_appid . '","component_appsecret":"' . $com_appsecret . '","component_verify_ticket":"' . $component_verify_ticket . '"}';
  		$url = 'https://api.weixin.qq.com/cgi-bin/component/api_component_token';
  		$res = json_decode ( $this->curl_post ( $data, $url ) );
  		$component_access_token = $res->component_access_token;
  		//cache component_access_token
  	}
  	return $component_access_token;
  }
  
  private function curl_post($data, $url) {
  	$curl = curl_init ();
  	curl_setopt ( $curl, CURLOPT_RETURNTRANSFER, true );
  	curl_setopt ( $curl, CURLOPT_TIMEOUT, 500 );
  	curl_setopt ( $curl, CURLOPT_SSL_VERIFYPEER, false );
  	curl_setopt ( $curl, CURLOPT_SSL_VERIFYHOST, false );
  	curl_setopt ( $curl, CURLOPT_URL, $url );
  	curl_setopt ( $curl, CURLOPT_CUSTOMREQUEST, "POST" );
  	curl_setopt ( $curl, CURLOPT_POSTFIELDS, $data );
  	$res = curl_exec ( $curl );
  	curl_close ( $curl );
  	return $res;
  }
  
  private function httpGet($url) {
    $curl = curl_init();
    curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($curl, CURLOPT_TIMEOUT, 1000);
    // 为保证第三方服务器与微信服务器之间数据传输的安全性，所有微信接口采用https方式调用，必须使用下面2行代码打开ssl安全校验。
    // 如果在部署过程中代码在此处验证失败，请到 http://curl.haxx.se/ca/cacert.pem 下载新的证书判别文件。
    curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 2);
    curl_setopt($curl, CURLOPT_URL, $url);

    $res = curl_exec($curl);
    curl_close($curl);

    return $res;
  }

  private function get_php_file($filename) {
    return trim(substr(file_get_contents($filename), 15));
  }
  private function set_php_file($filename, $content) {
    $fp = fopen($filename, "w");
    fwrite($fp, "<?php exit();?>" . $content);
    fclose($fp);
  }
}

